Preventing Buffer Overflow Exploits Using the Linux Distributed Security Module, Part 2 - page 4
Existing Solutions to Buffer Overflow Exploits
Buffer overflow exploits are one of the most interesting security vulnerabilities and are used in a majority of security attacks against Linux and UNIX-like operating systems. DSM guards against such exploits and it is implemented as a Linux module. DSM also provides many other features such as transparently controlling the access in the distributed environment of Linux clustered servers.
There are some notes which should be taken into consideration as well:
- There have been a lot of changes in the implementation of DSI from 0.1 to 0.2 then to 0.3 now and to the unstable 0.4. Therefore please make sure to read the documentation provided with DSI to ensure that what you are trying to experiment is valid for the version of DSI that you are using.
- To get more information, please visit DSI/DigSig Project and subscribe to the DSI mailing list.
In Parts 1 and 2 of this article, we presented and demonstrated that mandatory access control implemented in DSM can prevent against buffer overflow exploits. The security mechanisms were implemented in different levels of the executing system. Because there are many existing applications that are vulnerable to the buffer overflow exploits, one of our goals with DSM was to make the security transparent to the applications so even the existing programs can be secured without any modifications. The DSM source code is provided as open source and is available for download from the DSI web site.
Solid state disks (SSDs) made a splash in consumer technology, and now the technology has its eyes on the enterprise storage market. Download this eBook to see what SSDs can do for your infrastructure and review the pros and cons of this potentially game-changing storage technology.
- 1Linux Top 3: GNOME 3.12 and New Betas for Ubuntu 14.04 and OpenMandriva Lx 2014.0
- 2Linux Top 3: Linus Lashes out, Linux 3.14 Gets PIE and Ubuntu One is Done.
- 3Linux Top 3: Ubuntu 14.04, Debian Gives Squeeze More Life and Red Hat Goes Atomic
- 4Linux Top 3: CoreOS, Oracle Enterprise Linux 7 and Ubuntu 14.10
- 5Linux Top 3: Debian Gives Up on Upstart, Ubuntu and Linux Kernel Updates